VDB
CVE-2011-1088
CVE-2011-1088
PUBLISHED
CVSS 5.800000190734863 MEDIUM
Apache Tomcat 7.x before 7.0.10 does not follow ServletSecurity annotations, which allows remote attackers to bypass intended access restrictions via HTTP requests to a web application.
EPSS 6.45% · 93.6th percentile
Risk Scores
CVSS 2.0
5.800000190734863
EPSS Score
6.45%
93.6th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Maven | org.apache.tomcat:tomcat | 7.0.0 |
| n/a | n/a | n/a |
| apache | tomcat | 7.0.0, 7.0.1, 7.0.2 |
Timeline
- Mar 14, 2011 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- Jul 12, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Oct 27, 2022 EPSS Score
- Dec 19, 2022 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 4, 2023 EPSS Score
- May 26, 2023 EPSS Score
- Jul 18, 2023 EPSS Score
- Nov 1, 2023 EPSS Score
References
- tomcat-servletsecurity-sec-bypass(65971) vdb
- http://tomcat.apache.org/security-7.html url
- 71027 vdb
- [users] 20110302 Re: @DenyAll does nothing mailing-list
- 20110315 [SECURITY] CVE-2011-1088 Apache Tomcat security constraint bypass mailing-list
- [announce] 20110302 [SECURITY] Tomcat 7 ignores @ServletSecurity annotations mailing-list
- http://svn.apache.org/viewvc?view=revision&revision=1076586 url
- http://svn.apache.org/viewvc?view=revision&revision=1077995 url
- https://nvd.nist.gov/vuln/detail/CVE-2011-1088 advisory
- https://github.com/apache/tomcat/commit/f528992ec6cd7b62c9ced5b3a7dc4cda6bfd1a5e url
- https://github.com/apache/tomcat/commit/ee627412570268df47a075f5d4dc5f7debf39fad url
- https://github.com/apache/tomcat/commit/ece65c1a428094b1c6c17de3d7593f64e1bb1286 url
- https://github.com/apache/tomcat/commit/dd10265436ea8b2fe35f1a8b09bc7390acbea269 url
- https://github.com/apache/tomcat/commit/dbac5e24759954daed3c584abb5d466fcf42dd4b url
- https://github.com/apache/tomcat/commit/b1d1047a4c0a7754cabf57ac0303f92e4e77ef58 url
- https://github.com/apache/tomcat/commit/9c90bdc1ad942374b1bb6b147613497970b3c8e1 url
- https://github.com/apache/tomcat/commit/880b1a4fc424625b56c8bcd9ebf6bfe966a1dadd url
- https://github.com/apache/tomcat/commit/63fd724e129b647b7d9026ae29513dd6b774b4b5 url
- https://github.com/apache/tomcat/commit/5c8560f3054982abaa476d87ec031c439d58d66e url
- https://github.com/apache/tomcat/commit/3e5b0455483eed55752047073e92403bfca8d3ec url
…and 17 more